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ABSTRACT 

Novel large scale research projects often require cooperation between various different 
project partners that are spread among the entire world. They do not only need huge computing 
resources, but also a reliable network to operate on. The Large Hadron Collider (LHC) at 
CERN is a representative example for such a project. Its experiments result in a vast amount 
of data, which is interesting for researchers around the world. For transporting the data from 
CERN to 11 data processing and storage sites, an optical private network (OPN) has been 
constructed. As the experiment data is highly valuable, LHC defines very high requirements 
to the underlying network infrastructure. In order to fulfil those requirements, the connections 
have to be managed and monitored permanently. In this paper, we present the integrated 
monitoring solution developed for the LHCOPN. We first outline the requirements ana show 
how they are met on the single network layers. After that, we describe, how those single 
measurements can be combined into an integrated view. We cover design concepts as well as 
tool implementation highlights. 
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1. Introduction 

The significant increase in the availability of high-speed research networks has led to the 
deployment of large-scale distributed computing environments that are able to serve a great 
number of geographically separated users by exchanging huge amounts of data. Direct communi- 
cation between sites and computing facilities is now necessary in many working environments. 
This results in greatly expanded requirements for high-speed, dedicated networks that cross 
multiple domains. The European Research Network GEANT [IJ and National Research and 
Educational Networks (NRENs) in Europe are high-capacity networks, which are based on 
optical technologies and components that provide wavelength-based services to the research 
community. 

A representative project is the provisioning of the networking infrastructure for the Large 
Hadron Collider (LHC) at CERN in Switzerland. Its research experiments produce about 15 
petabytes of data per year. Therefore, a multi-domain LHC Optical Private Network (LHCOPN) 
was established lO, dedicated to support data exchange. The LHCOPN consists of Tier-0 and 
Tier-1 centres connected by End-to-End (E2E) links. These E2E links connect organisations 
(Tier-1 centres) that are located in different countries and cross the shared network infrastructure 
of different providers towards the Tier-0 centre at CERN. 

One of the most important and difficult issues related to this dedicated network is network 
management. The monitoring and troubleshooting of optical networks and individual E2E links 
is challenging. Researchers all over the world are increasingly using dedicated optical paths to 
create high-speed network connections, and different groups of users may want to use monitoring 
applications for specific research purposes. They need access to network measurement data from 
multiple involved network domains, visualise network characteristics and troubleshoot related 
issues [3]. 



A quick overview and visualisation of the network status is necessary to establish demar- 
cation points that help distinguish network issues within LHCOPN from those in the sites. 
The deployment of monitoring tools and the use of common services should provide a unified 
network information view across all domains [4]. Typical off-the-shelf solutions do not provide 
such functionality. 

This article is structured as follows: In Section [2j the requirements in the context of the 
LHCOPN are described. After that, some important existing approaches in the area of inter- 
organizational monitoring are outlined in Section |3] Section]?] explains, how monitoring is done 
at layer 1 and 2, before monitoring at layer 3 and above is added in Section |5] A motivation 
of integrating them and a description of this integration is outlined in Section [6j Section [7] 
then gives an overview of the implementation and the operational experiences gained within 
the LHCOPN. The article is concluded in Section [8l 

2. Requirements 

The monitoring of the LHCOPN, i.e. Tier-0 and Tier-1 centres, and the links between them 
poses several new challenges: 

2.0.0.1. Multi-domain monitoring. The LHCOPN itself is based on resources that are 
supplied by several academic networks such as GRANT, European NRENs, Intemet2, ESnet 
and Canarie. Therefore, a solution has to be found to collect monitoring data from all these 
self- administered networks to form a joint view of the resulting network. 

2.0.0.2. Monitoring of different layers. While academic networks have been used to mon- 
itor the network layer, the LHCOPN requires E2E links on the data link layer to be monitored. 
These are based on heterogeneous technologies, as the different participating networks use 
different technologies. E2E links are formed by combining technologies such as SDH/SONET, 
native Ethernet or Ethernet over MPLS, where each domain is dependent on the data that it 
can retrieve from the network management system of its vendor. 

2.0.0.3. Joint view of all metrics. In the visualisation a view has to be formed by combining 
E2E link and IP-related monitoring data and by linking these data in a suitable manner. In 
doing so, it must be considered that there are also several data sources on the IP level, in 
particular the retrieval of SNMP data from routers and the results of active measurements. 

3. Existing approaches 

The issue of multi-domain monitoring is not only a challenge in the context of the LHCOPN, 
but also in the general operation of networks. In 2004 a collaboration of the GN2/GN3 project 
with Intemet2, ESnet, RNP and others was started to jointly develop a communication protocol 
and tool set under the name perf SONAR Q, O. This development has become necessary by 
the limitations of existing tool sets which were tied to single domain monitoring and limited 
to subsets of metrics that can be monitored. Such limitations apply e.g. to the MonALISA [7| 
tool set. Apart from being used in the LHCOPN, the perfSONAR tools are used within the 
networks that participate in the collaboration. As perfSONAR is open source, it is used by other 
projects like Distributed European Infrastructure for Supercomputing Applications (DEIS A) iHl 
too. 

There are already several tools which can visualise perfSONAR measurement data [9]. One 
of them is perfsonarUI which can be used for troubleshooting by allowing a direct interaction 
with perfSONAR measurements. 

All principles of the perfSONAR protocol will be taken into account in the customisation for 
the LHCOPN, especially its multi- domain-monitoring feature. Furthermore, this will be done 
with respect to the different layers monitoring also developed within the GN2/GN3 projects. 
The missing requirement for this customisation is the joint view on all metrics. Also, a global 
overview of the LHCOPN was needed, in which different layer views coexist. This customisation 
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Figure 1. Functionality of E2EMon MP 

was achieved by a dedicated version of the Customer Network Management (CNM) tool |[TOll 
(in a browser-based version). 

4. Monitoring at layer 1 and 2: E2EMon 

The introduction of hybrid networks and the possibility to deliver E2E links that involve 
multiple domains has led to the need to monitor these links. E2E Links are defined as dedicated 
optical point-to-point network connections realized at ISO/OSI layers 1 and 2. For the pur- 
pose of fault detection and localization of such connections, a dedicated tool called E2EMon 
(E2E Monitoring Tool) ifTTIl has been developed over the recent years. It is used by the E2E 
Coordination Unit (E2ECU) in GEANT - an organizational unit established for inter-domain 
coordination of operational procedures. 

E2EMon basically consists of two important components — the Monitoring Point (MP) and 
the central component. Every domain which provides a segment of such an E2E link needs to 
have an E2EMon Measurement Point (MP) in place which retrieves data from the local network 
management system to provide status information for the link segment. In the following, we 
will first outline, how the Measurement Points works, continuing with a detailed description 
of the central component. 

4.1. E2EMon measurement point (MP) 

The Monitoring of circuits crossing different organizational domains is often a big challenge. 
It is not quite easy to get all the needed information from all involved router interfaces and so on. 
Furthermore, many network operations centres (NOCs) already have their own local monitoring 
solution, which they want to keep. Therefore, an infrastructure and technology independent col- 
lection of this local monitoring data is needed. The E2EMon MP provides an interface between 
those provider specific and a provider independent representation of monitoring information. 

The E2EMon MP is a set of perl scripts. Once installed and deployed in every involved 
domain, it is basically a standalone SOAP server instance. Therefore, it does not rely on 




Figure 2. Information flow: from domains to E2EMon and E2ECU iHTIl 



webservers like tomcat, apache, etc. It does not instafl itself as a daemon service, but of course 
can be run as such if it is configured in the operating system. All necessary and required modules 
are installed together with the service. 

After that, E2EMon MP is waiting for an XML file to send to the central component. This 
XML file has to be generated by the particular network monitoring system (NMS) in use, for 
example, Nagios, Cacti, or others (see Figure [TJ. 

Obviously, this XML file has to be updated regularly — otherwise it will not reflect the actual 
situation. The XML file is based on the schema introduced by the OGF Network Measurements 
Working Group (NMWG) |[l2|, ||T3l. A typical snippet of such an XML file is shown below 
in Listing 1. 

Listing I. Sample E2EMon MP XML file 

<nmwg:message type = " SetupDataRequest " 

xmlns:nmwg=" http: //ggf. org / ns /nmwg / base / 2 . / "> 
<nmwg:metadata id = "metal"> 

<nmwg:eventType>Path . Status</nmwg:eventType> 
</ nmwg:metadata> 

<nmwg:data id = "datal" metadataIdRef=" metal " /> 
</nmwg:message> 



The XML file itself does not contain specific detailed measurement data, but rather an 
abstracted view of it. The interfaces and links are categorized as UP, DOWN, DEGRADED, 
or UNKNOWN, depending on their actual operational state. This mapping has to be provided 
by the domain's monitoring system, respectively by the tool or script that converts the local 
monitoring system's data to XML. Last but not least, the XML file consists of different sections, 
each providing information about either a so called monitored link or so called demarcation 
points needed by the central component of the E2E Monitoring System . We will explain these 
two terms in detail in the next section. 

4.2. E2E link Monitoring System (E2EMon) 

E2EMon relies on the „health" information provided by different NRENs. A term „Monitored 
Link" is used by E2EMon developers and users in order to refer to E2E Link parts, for 
which monitoring information is provided by NRENs. All monitored links are edge-to-edge 
connections from a border of one NREN to the border of the same or neighbor NREN. Ends 
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Figure 3. E2E Link, typical built up |[T4ll 



of Monitored Links are referred to as Demarcation Points (DPs). The Following three types 
of Monitored Links are supported by E2EMon: 

• Domain Link is an connection completely realized within a single NREN 

• InterDomain Link is a whole connection, interconnecting two neighboring NRENs 

• InterDomain Link Part is the type of connection representing a part of Inter-Domain 
connection from the perspective of a single NREN 

The distinguishing between InterDomain Link and InterDomain Link Part is necessary be- 
cause of typically very restrictive information and management policies of the involved NRENs. 
In most cases these policies prevent the measurement of inter-domain connection state. There- 
fore, „InterDomain Link Part" is used to provide state information from a single NREN's 
perspective. States of two parts can be aggregated to the state of the whole inter-domain 
connection. Also, the restrictive information policies cause high abstraction levels of Monitored 
Links. 

One of the challenges, which have to be overcome in a multi-domain environment is the 
synchronization of monitoring data. E2EMon does not require clock synchronization in multiple 
NRENs. Instead, E2EMon polls MPs/MAs of different NRENs periodically (see Figure [2]). 
E2EMon assumes then that data retrieved from multiple NRENs in the same polling cycle is 
up to date and synchronized. Currently, a 5 minute polling interval is used. This time interval 
is treated by E2ECU as fine grained enough. The time needed to collect and to process data 
from about 30 NRENs is about 1 minute. 

Because of the independence of NRENs and non-coordinated procurement policies, heteroge- 
neous hardware and network technologies are used in general to realize E2E Links parts. Typical 
are SDH, Ethernet, Ethernet over SDH, and MPLS (see Figure |3]). Due to high heterogeneity 
and as an outcome of this a high difference of state information, a true technology specific 
monitoring data cannot be used for multi-domain monitoring. Instead, the following abstracted 
operational states are used: 

• UP - the connection is up and running 

• DEGRADED - the connection is up, but with degraded performance 

• DOWN - the connection is down and cannot be used at all 

• UNKNOWN - the state of the connection is unknown 

Identical aggregation rules have been defined for (a) two InterDomain Link Part states to the 
state of a whole InterDomain Link and (b) all Monitored Links of a particular E2E Link to 
the whole E2E Link state. The aggregation rules are defined in the way, that the worst state 
dominates. By implementating such a strategy, values have been assigned for all supported 
states (see Figure [4(a)l ). In the aggregation rule, the biggest state-weight of involved Monitored 
Link is used as a weight of the whole E2E Link. If one or more Monitored Link states are 
UNKNOWN, the GUI shows a warning independent of the aggregated state. 
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(b) Administrative States 
Figure 4. E2EMon States O 



In addition to the operational state, E2EMon supports an administrative state of monitored 
and E2E links. The supported states, their weight and short description are listed in Figure [4(b)l 
The rule to aggregate the administrative state is identical to the one used for the operational 
state. The administrative state reflects the management processes performed by the domains. 
This state is used by E2EMon in order to, e.g., prevent a new alarm from being raised if the 
Monitored Link goes DOWN during a planned maintenance. 

In practice, some of the described features of E2EMon are not used. As there is no strict 
definition of semantics for DEGRADED state, NRENs generally omit to report it even if the 
degraded performance is recognized. Another unused feature is the possibility that an NREN 
reports the whole state of an Inter-Domain connection. In order to do this, an access to the 
infrastructure of a neighbor NREN is needed. But as this collides with the restrictive security 
policies of some NRENs, only reports of Domain Link Parts are used currently. Finally, the 
administrative state is used by few NRENs only. The coupling of NREN- specific management 
tools and the export of the data for E2EMon is difficult. The state of E2E Links is presented 
in the E2EMon GUI. All E2E Links are shown in a semi-graphical view, which provides 
information about the Monitored Links and their order in the link. E2EMon does not require 
information about order and arrangement of Monitored Links in advance. Instead, E2EMon 
computes this information implicitly as follows: 

• For every Monitored Link the globally unique E2E Link ID is provided, which allows to 
group information provided by different NRENs. 

• Every Monitored Link is further specified by globally unique IDs of its Demarcation Points. 
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Figure 5. Reconstruction of an E2E Link iHTIl 



Based on this information, different Monitored Links are „stitched together" at the DPs with 
the same IDs (see Figure |5]). 

In some cases, the reconstruction of the whole E2E Link structure might not be possible. 
This can happen, e.g., if some MPs/MAs can not be reached due to firewall restrictions. It is 
also possible that information about monitored links is provided using wrong IDs for DPs. Such 
situations sometimes occur if new E2E Links are setup. In those cases, E2EMon assembles as 
many pieces of an E2E Link as possible and displays them with the icons for gaps between 
contiguous sections (see Figure [6]). 
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Figure 6. GUI representation of an E2E Link flSj 



E2EMon distinguishes between productive and not yet productive E2E Links. For productive 
E2E Links, monthly and weekly availability statistics are collected. These statistics contain not 
only UP and DOWN time of a particular E2E Link, but also the so called „Uncertain-Time". If 
the E2E Link structure could not be fully reconstructed, the state of the link is calculated based 
on the information of known monitoring links. At the same time, this state is considered as 
„uncertain" as it can be influenced by states of unknown monitored links. If an E2E Link is in 
uncertain state, the polling period is added to the link's uncertain time counter. The availability 
of an E2E Link is computed as certain Up-Time divided by the overall monitoring time of the 
link. Statistical information can be accessed via the GUI and also saved as a CSV (comma 
separated value) export file (see Figure |7]). 
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Figure 7. Monthly statistics of productive E2E Links |[T5]| 



E2EMon is a tool integrated in manual operational processes. Alongside with the GUI, several 
interaction interfaces have been implemented. In case an E2E Link state changes to DEGRADED 
or DOWN, E2EMon automatically sends email notifications to E2ECU and involved NRENs. In 
order to simplify the integration of E2EMon with other management tools like Nagios, SNMP 
traps are generated every time an E2E Link state changes. The state of all productive E2E 
Links is exported using an XML file. This XML export is updated every polling interval and 
used by LHCOPN Weathermap for integrating layer 1 and 2 states with other measurements. 

5. Monitoring at layer 3 and above: HADES and BWCTL 

For IP-level monitoring, the HADES and BWCTL tools are of interest, as they provide 
relevant metrics and are integrated into the perfSONAR framework. Therefore, they were easily 
integrated as a part of the LHCOPN overall management solution. 

5.1. HADES 

HADES (Hades Active Delay Evaluation System) |fT6l| uses dedicated hardware boxes to 
perform active tests in the network to measure delay, jitter, packet loss and traceroute (with 
respect to IPPM recommendations ifTTll ). For precise timing, GPS antennas are installed in 
addition to the hardware boxes. Networking Time Protocol (NTP) can also be used but with 
less precision. 

The HADES IIT6II boxes have been deployed at the Tier-0 and Tier-1 LHCOPN locations 
to provide QoS measurements. The HADES topology is made up of the abstract nodes, so it 
can easily link them to E2E measurements and directed (uni-directional) HADES links between 
them. A HADES link is determined by its source and targeted abstract nodes. As HADES links 
correspond to pairs of abstract nodes, they are identified by ordered pairs of abstract locations. 

HADES measurements are run as a full mesh between all nodes. To prevent users from 
being overloaded with too much data, the visualisation in the integrated view (the so-called 
Weathermap, see Section [6]) is limited to measurements that relate to paths where E2E links 
exist. 

The metrics on the HADES layer are IP performance metrics (IPPM) computed for each 
HADES link (one way delay [18], IP delay variation (jitter) |19| and packet loss |20|) as well 
as the hop list/count metric. As the links are directed between two different HADES end points 
A and B, the metrics exists for A ^ B and B ^ A. All these metrics have a time resolution 
of 5 minutes. The HADES metrics are stored in a HADES Measurement Archive (based on 
the SQL MA), which is used to store and publish historical monitoring data produced by the 
HADES Measurement Points. 

5.2. BWCTL 

Similar to HADES, BWCTL (Bandwidth Test Controller) [21 J verifies available bandwidth 
from each endpoint to other points to identify throughput problems. In the LHCOPN, BWCTL 
nodes are included within the HADES boxes by using a second interface card. 

Each BWCTL end point address is associated with an abstract node. This is a 1:1 mapping 
but the IDs of the BWCTL end point and of the abstract node are not the same (BWCTL IP 
addresses vs. location names). 

On this layer, the needed metrics are minimum, medium and maximum BWCTL throughput 
(stored in the SQL MAs). As the BWCTL links are directed between two different BWCTL 
end points A and B, these BWCTL metrics exist for both directions A ^ B and B ^ A. 

6. Integrated View: LHCOPN Weathermap 

Network operators rely on monitoring information. Different layers provide different informa- 
tion of the monitored links. In order to foster the operational procedures, an integrated view of 



the monitoring information is needed. To provide such an integrated view, all the measurements 
important to the LHCOPN have to be identified and a mechanism has to be defined how they 
can be combined. 

6.1. Measurements in LHCOPN 

To understand the metrics displayed in the LHCOPN Weathermap, it is necessary to know 
how the measurements are carried out. The deployment of the perfSONAR measurement tools 
at each Tier- 1 -centre is therefore shown in Figure [8] 
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Figure 8. Tier-1 site configuration 

First of all, data is collected for the E2E links (see Section |4]). The links start at the Tier-0 
centre or at one of the Tier-1 centres (backup links), end at one of the Tier-1 centres and 
typically cross several administrative domains (e.g. GRANT, European NRENS, Intemet2 or 
ESnet). The status of each link is then calculated based on the NMS data from each domain 
involved. 

In addition to this E2Emon MP, three measurement servers are located at each centre: 

• HADES/BWCTL MP: The first server is the HADES box, which conducts one-way delay 
|[T8]| , IP delay variation (jitter) |[T9ll , packet loss |20|, and traceroute tests with any other 
HADES box in the LHCOPN every minute. It is connected to a GPS antenna for precise 
timing. In addition, the HADES box hosts a BWCTL MP which is used for throughputs 
with the Tier-0 centre every 8 hours. The BWCTL MP is hosted on a different interface 
to avoid interference with HADES measurements. 

• Telnet/SSH MP: The second server is used for the Telnet/SSH MP, a tool that allows con- 
figuration data to be retrieved from the routers. It is only mentioned here for completeness, 
but does not carry out any regular measurements. 

• The last server is used to host an RRD MA to collect utilisation, interface errors and 
output drop data related to the router located at the Tier-1 centre. 

6.2. Integrating the monitoring data 

The measurements that are carried out have to be displayed in a suitable manner, which 
means in this case that a trade-off between correct display and usability has to be made. For 



example, HADES measurements are not directly located on the routers, so that delay data is not 
exactly measured at the location of utilisation measurements. Events on the short link between 
router and HADES box can lead to wrong interpretations. 

Even more difficult considerations have to be made for E2E link status data and its relation 
to IP metrics. By default the IP data in the network uses the direct way via an E2E link. 
However, if the E2E link fails (including the optical protection), then the IP protection performs 
a rerouting. Although IP packets are still transferred, they take another physical route. Therefore, 
it is necessary to clearly distinguish between optical and IP level. 

For this reason, a data model is introduced in the following that covers all topology infor- 
mation per network layer and all necessary topology mapping information for the LHCOPN 
Weathermap. 

With respect to the requirements stated in Section [2j the operators of the LHCOPN need 
a global view on their network. Other essential aspects are layer-related, location-related and 
metric -related views on the LHCOPN. An E2E view is needed to check the availability of the 
E2E links involved. Therefore, as described in the former sections different layers (topologies) 
have been defined: E2E link, HADES and BWCTL. 

Information about the IP links between two different IP interfaces is needed to determine 
the status of the links between two IP interfaces within the LHCOPN (these are VLANS in 
their terminology). 

The router topology consists of the abstract nodes, which here relate to IP interfaces and IP 
links (pairs of IP interfaces). One IP link corresponds to a VLAN in the LHCOPN terminology. 
The current assumption is that one abstract link is associated with one IP interface pair only. 
This means that, if one abstract link has two or more E2E links, they both contribute (in an 
aggregated manner) to the same IP link (back-up link or bundle of links). Also, one E2E link 
can contribute to a single VLAN only. 

The metrics used on the router topology are utilisation, input errors and output drops for each 
end point of an IP link. These metrics have a time resolution of 5 minutes. Typically, they are 
retrieved via SNMP from routers and stored in so called RRD MAs (Round Robin Database 
Measurement Archive) or SQL MAs (Structured Query Language Measurement Archive). These 
are tools that provide archived measurement data. 

7. Operational experience and implementation highlights 

To satisfy the LHCOPN requirement for multi-domain monitoring accessed through a global 
view, a layer based on the E2E link has been specified to form the main view. This layer gives 
an overview of the whole LHCOPN, on the dedicated E2E links involved in the LHCOPN. For 
each link that is displayed in the topology two kinds of abstractions can be involved. A link 
represented here can be an E2E Link or it can be an E2E link plus another E2E link which serves 
as optical (1+1) protection. The other kind of abstraction that is involved, is that for each E2E 
link the status is derived from data retrieved from multiple NMS. In the following a detailed 
description of the E2E Link topology, whose representation in the LHCOPN Weathermap is 
shown in Figure [9} is given. 

The topology consists of abstract nodes and abstract links. Abstract nodes represent the Tier- 
and Tier-1 LHCOPN locations and are named accordingly. They abstract the exact location 
where measurements are conducted in order to allow easy linking of this topology to the other 
topologies. The abstract links are non-directed (i.e. bidirectional) links between the abstract 
nodes. 

The metric used for this abstract layer is the aggregated status for each abstract link. It is 
computed every 5 minutes from the E2EMon status of all associated E2E links. For a single 
E2E link the status is retrieved in the E2EMon system by polling all E2EMon MPs every 5 
minutes. 




Figure 9. A view on the E2E Link Topology Tab in the LHCOPN Weathermap tool 



7.1. Data retrieval, filtering and integration 

The data retrieval is concerned with the fetching and updating of topology information, 
topology mapping information, metric mapping information (see Sections |4] and [5]), as well as 
the actual metric data fetching. The measurements in LHCOPN as well as metric data fetching 
were outlined in Section 16.11 

The abstract topology and its associated E2E links have to be imported from a structured, 
static configuration file provided by LHCOPN users or, in the future, from an online config- 
uration file. 

The E2E Link topology is fetched from the E2EMon export interface together with their 
individual E2E link states and have to match the ones (associated with abstract links) specified 
above. 

The HADES topology is imported from metadata of the LHCOPN HADES MA. The topology 
mapping (abstract node 1:1 HADES node) is trivial, and has to be altered to show links that 
are interesting to the Weathermap (links that correspond to an abstract link). 

The BWCTL topology is imported from metadata in the LHCOPN BWCTL SQL MA. The 
mapping between BWCTL nodes (BWCTL IP addresses) and abstract nodes is statically con- 
figured. 

Potential LHCOPN IP interface address pairs are imported from the metadata of various 
LHCOPN RRD MAs and then need to be altered according to the abstract link to IP interface 
address pair mappings specified above. 

7.2. Visualisation 



To meet the requirements of LHCOPN users, a visualisation consisting of three tabs has 
been designed: Overview Map Tab, Metric Tab and E2E Link Tab. 




7.2.1. The Overview Map Tab 

In this tab (see Figure |9]) a map consisting of abstract nodes and abstract links (described in 
Section [5]) is shown. This overview map indicates the current status using four colours: RED, 
YELLOW, GREEN and BLUE for the current abstract link status DOWN, WARNING, UP 
and UNKNOWN (defined in Section [5]). 

In addition to that, the fifth status (MAGENTA) does not represent a value of the metric's 
aggregated status, but instead indicates that there is a serious mismatch in the topology mapping 
concerning the abstract link; namely that all associated E2E links (from the point of view of 
the abstract topology) are unknown to the E2E topology (from the point of view of the E2E 
topology). This status is called topology unknown and indicates that no aggregated status for 
the abstract link could be computed. 

The content of the other two tabs (Metric tab and E2E Link tab) is shown when clicking 
either on an abstract link or an abstract node in the map. So by clicking and choosing the 
selected abstract element, data corresponding to this abstract link or node is loaded in the metric 
tab and E2E link tab. 

7.2.2. The Metric Tab 

The metric tab shows statistical graphs of metrics associated to particular abstract links. 

If an abstract link in the overview map is selected, data for this specific link is shown. If 
a Tier-1 abstract node is selected, the abstract link from the Tier-0 abstract node (CERN) to 
this selected Tier-1 abstract node location is selected. If the Tier-0 abstract node (CERN) is 
selected, data for all abstract links from CERN to any Tier-1 is displayed. 

In the metric tab, 24-hour metric graphs of various metrics of the network layers (see Sections 
|4] and |5]) are presented for the chosen abstract link. The list of visualised metrics is different 
depending whether the selected abstract element is a node or a link. 

Metrics for an abstract link: Selecting an abstract link in the overview map displays the 



following metrics for this link (see Figure 10(a)) in the Metric tab 



The graph of the E2E aggregated status associated with the abstract link itself. This is 



based on the data model in Section [771] and is visualised in the previously mentioned status 
colours. 



The RRD MA metrics graphs (see Section 6.2 for the single IP link associated with the 



abstract link. These are visualised for both IP interfaces at both end points of the IP link. 
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Figure 11. The E2EMon status tab 



All the metrics are measured and updated every 5 minutes. 

Metrics for an abstract node: Selecting an abstract node in the overview map (all Tier-0 
to Tier-1 abstract links related to the selected abstract node) displays statistic graphs of the 
following metrics for the chosen abstract links (see Figure |10(b)| ): 

• The Hop count metric graph is divided into differently coloured areas, indicating different 
routes. 

• The HADES metrics are visualised as scatter plot graphs (values are dots), each with a 5 
minute time resolution. For one way delay and jitter the minimum, medium and maximum 
is needed. 

• BWCTL metric graphs are visualising the minimum, medium, and maximum BWCTL 
throughput. 

7.2.3. The E2E Link Tab 

The metric tab specified in the previous Section shows metrics on different (network) layers 
in a more end-to-end like fashion between the Tier-O/Tier-1 locations. In addition to this, the 



E2E link tab (see Figure [TT]) presents a section status view for the focused abstract link. This is 
done by wrapping the HTML page for the E2EMon section status for each E2E link associated 
to the focused abstract link in the map overview tab. 

If the selected element in the map overview tab is an abstract link, the E2EMon segment 
status is shown for all E2E links associated to this. 

If the selected element in the map overview tab is an abstract Tier-1 node, the E2EMon 
segment status is shown for all E2E links associated with this focused abstract link. 

7.3. Client and Access Point 

The client is implemented as a dynamic HTML page with some Java script code used for 
the tabbing interface. 

To speed up the access, some graphical parts of the content are created and cached in advance: 

• The current 24-hour statistic plot of any network element necessary as specified in Sections 
|4] and |5] are usually updated on a 5 minutes basis. 

• The overview map which includes the link status colour is updated every 5 minutes. 



• Internal to the HTML dynamic generation scripts, additional data base content caching is 
performed to speed up access further. 

8. Conclusion and future work 

In this article, the monitoring of the LHCOPN has been explained with a focus on the 
LHCOPN Weathermap. The support structure is ready to fulfil its needs and has proven its 
usefulness in day-to-day operations since the LHC experiments are running, and large amounts 
of data are actually transferred via the network. 

Besides continuous improvements to the already existing tools, an alarm tool is currently 
under development. It is designed to be quite flexible in terms of alarm generation, to be suitable 
for different user needs. 

The perfSONAR services used for the LHCOPN and the Weathermap provide a good basis 
for the future large scale projects in Europe. A collection of such projects can be found in the 
roadmap of the European Strategy Forum on Research Infrastructures (ESFRI) [17]. For the 
Weathermap, this means that different ways of customisation to meet the needs of other projects 
are going to be investigated. For projects that want to use dynamic circuits, the perfSONAR 
group is already investigating suitable monitoring methods. 
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